seph

Results 285 comments of seph

Bug: not setting correct exit code on unknown errors

Hi @dreisel ! Thank you so much for the submission. Are you able to sign the CLA?

Distributed queries execute regardless of discovery

Hrm. I can't find docs about how discovery queries and distributed queries are supposed to interact. But I did stare at the code a bunch... I don't know what correct...

Distributed queries execute regardless of discovery

Hi @lucasmrod, thank you so much for taking a pass here. I am not sure that this is the correct solution, but I'm willing to hear more. I think there...

The `password_policy` table does not seem to allow selecting only global policies

Ha! I try casting to string, but I did not try typeof or printf. Nice. Also interesting is that as I play with this, I don't see all he options....

The `password_policy` table does not seem to allow selecting only global policies

> Do you know of an easy way to set password policies, with `pinHistory` and failed/attempt counts? I will try and see if it's possible and if so, how we...

osqueryd requires SysV (chkconfig package)

To expand on the suggested fix... The issue is that we ship both init scripts, on the theory that the OS will just use the correct one. But we're being...

ibridge_info table is broken on T2 devices

We tried it with 4.0.2, and got the same `Cannot get EmbeddedOS properties` error. (I think 4.0.2 used the older SDK)

Querying processes table the start time field is not always returning the same value for the same process pid and process instance

> Calculating `(now - uptime)` only once and storing it in a static variable should fix the issue, since the boot time won't change without the osquery process being started...

Querying processes table the start time field is not always returning the same value for the same process pid and process instance

It seems like in the face of NTP, it's very hard to reliably convert this to an absolute timestamp. So I think we should accept that there might be slight...

Querying processes table the start time field is not always returning the same value for the same process pid and process instance

Looking at #3892 and dropping some notes here... It creates a darwin-only `getUptimeInUSec` function. Which, for reasons unclear to me, ignores the reported boot usec, and calculates it based on...